ELEA-2023-5065

ELEA-2023-5065 - crypto-policies enhancement update

Type:ENHANCEMENT
Severity:NA
Release Date:2023-09-26

Description


[20221215-1.git9a18988.1]
- openssl: implement relaxing EMS in FIPS (NO-ENFORCE-EMS)
- gnutls: use tls-session-hash option
- nss: use TLS-REQUIRE-EMS
- NO-ENFORCE-EMS: add subpolicy
- FIPS: set __ems = ENFORCE
- cryptopolicies: add enums and __ems tri-state
- docs: replace FIPS 140-2 with just FIPS 140
- codespell: ignore aNULL
- nss: retire NSS_OLD and replace with NSS_LAX 3.80 check




Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm93516803379f88dbde3a861cff44ada8-ol9_aarch64_baseos_latest
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm93516803379f88dbde3a861cff44ada8-ol9_aarch64_u2_baseos_patch
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpma7787d961c06592a281d91485e8c1b17-ol9_aarch64_baseos_latest
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpma7787d961c06592a281d91485e8c1b17-ol9_aarch64_u2_baseos_patch
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpmf32d2720c933ed03e38c176521746734-ol9_aarch64_baseos_latest
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpmf32d2720c933ed03e38c176521746734-ol9_aarch64_u2_baseos_patch
Oracle Linux 9 (x86_64) crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm93516803379f88dbde3a861cff44ada8-ol9_x86_64_baseos_latest
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm93516803379f88dbde3a861cff44ada8-ol9_x86_64_u2_baseos_patch
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpma7787d961c06592a281d91485e8c1b17-ol9_x86_64_baseos_latest
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpma7787d961c06592a281d91485e8c1b17-ol9_x86_64_u2_baseos_patch
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpmf32d2720c933ed03e38c176521746734-ol9_x86_64_baseos_latest
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpmf32d2720c933ed03e38c176521746734-ol9_x86_64_u2_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete